I have the following search and am looking to display its results over the past 30 days. It currently shows the results but but only the current day is accurate. Any advice would be much appreciated...
index=data NOT ID="*" earliest=-30d@d latest=now|regex name!="[a-z].*"|dedup id2|timechart span=1d count
↧